The Israeli mercenary spyware company Candiru reportedly delivered its spyware to devices at Al Jazeera Media Network through targeted online advertisements. These were zero-click attacks, meaning the spyware was deployed simply by rendering the malicious ads, sometimes even in the background. Citizen Lab’s research reveals a sophisticated method of infection that bypasses user interaction, highlighting the advanced capabilities of commercial spyware.